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Top Stories 

• Twenty-five Jacksonville, Florida-area residents and two others were charged November 
25 in an alleged false compensation scheme that defrauded a BP oil spill compensation 
fund of more than $1 million. - Florida Times -Union (See item 1) 

• A crash on Interstate 35 in San Marcos, Texas, involving 2 semi-trucks and 6 passenger 
vehicles destroyed 3 vehicles, left 1 person dead and 4 others injured, and shut down 
northbound lanes for nearly 12 hours November 25. - KXAN 36 Austin (See item 5) 

• DeKalb Hospital in Auburn, Indiana, resumed normal operations November 24 after 
halting all admissions for 2 days after Legionnaire’s Disease bacteria was found in the 
hospital water supply following the death of a patient who tested positive for the bacteria. - 
Associated Press; Auburn Star (See item 15) 

• A former patient registration specialist at Parkland Memorial Hospital in Dallas pleaded 
guilty November 25 to stealing the personal information of more than 3,000 patients to 
recruit customers for his own business. - Dallas Morning News (See item 16) 
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Energy Sector 



1. November 26, Florida Times-Union - (Florida) 27 indicted in fraud case from 2010 
BP oil spill; most from Jacksonville area. The U.S. Attorney’s Office announced that 
25 Jacksonville-area residents and 2 others were charged November 25 in an alleged 
scheme to defraud a BP oil spill compensation fund of more than $1 million by 
claiming they were employees of businesses affected by the 2010 oil spill following the 
explosion of the Deepwater Horizon oil rig in the Gulf of Mexico off Louisiana. 

Source: http://iacksonville.com/news/crime/2014-ll-25/story/27-iacksonville-area- 
residents-indicted-fraud-case-20 1 0-bp-oil-spill 

For another story, see item 25 
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Chemical Industry Sector 

See item 25 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

2. November 25, U.S. Securities and Exchange Commission - (Missouri) SEC charges 
former Solutia executive with insider trading. The U.S. Securities and Exchange 
Commission filed charges in the U.S. District Court for the Eastern District of Missouri 
against the former CEO of Solutia Inc., November 25 for allegedly using insider 
information ahead of the company’s acquisition by Eastman Chemical Company to 
make illicit profits of $104,391. The former CEO agreed to settle the charges and was 
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required to pay $104,391 in disgorgement, another $104,391 in a penalty, and 
$8,371.71 in interest as well as being barred from serving as an officer and director of a 
public company. 

Source: http ://www . sec . go v/litigation/litreleases/20 1 4/lr23 1 42.htm 

3. November 25, U.S. Securities and Exchange Commission - (International) SEC 

charges HSBC’s Swiss private banking unit with providing unregistered services 
to U.S. clients. HSBC’s Switzerland-based private banking arm, HSBC Private Bank 
(Suisse), agreed to admit wrongdoing and paid $12.5 million to settle U.S. Securities 
and Exchange Commission charges that the entity violated federal securities laws by 
failing to register with the SEC before providing international investment advice and 
brokerage services to U.S. clients. 

Source: http://www.sec.gov/News/PressRelease/Detail/PressRelease/1370543534789 

[ Return to top ] 

Transportation Systems Sector 

4. November 26, Fort Lauderdale Sun Sentinel - (Florida) Plane struck by lightning 
lands safely at Fort Lauderdale-Hollywood International Airport. A Spirit Airlines 
flight from Tampa diverted to Fort Lauderdale-Hollywood International Airport as a 
precaution November 25 after it was struck by lightning while on its way to Atlantic 
City, New Jersey. The plane landed safely and was inspected by maintenance crews. 
Source: http://www.sun-sentinel.com/news/broward/sfl-plane-struck-bv-lightning- 
lands-safelv-at-fort-lauderdalehollvwood-intemational-airport-20141125-story.html 

5. November 26, KXAN 36 Austin - (Texas) Deadly crash closes parts of 1-35 in San 
Marcos. Police are investigating after deadly crash on Interstate 35 in San Marcos 
involving 2 semi-trucks and 6 passenger vehicles destroyed the 2 trucks and 1 of the 
passenger vehicles, left 1 person dead and 4 others injured, and shut down northbound 
lanes for nearly 12 hours November 25. 

Source: http://kxan.com/2014/ll/25/fiery-big-rig-crash-closes-down-i-35-in-san- 
marcos/ 

6. November 26, WKBT 8 La Crosse - (Wisconsin) Three dead in head-on collision in 
Onalaska. Highway 35 in Onalaska was shut down for 5 hours November 25 following 
a 3-vehicle accident that killed 3 people. 

Source: http://www.news8000.com/news/3-dead-in-headon-collision-in- 
onalaska/29934 128 

7. November 25, KCRA 3 Sacramento - (California) Railroad cars derail near Feather 
River in Plumas Co. Crews began cleaning up com that spilled down a canyon and 
into a river when a Union Pacific freight train derailed 1 1 or 12 of the train’s 106 cars 
in the Feather Canyon along Highway 70 in Plumas County November 25. Authorities 
are investigating the cause of the derailment. 

Source: http://www.kcra.com/news/12-railroad-cars-derail-near-feather-river/29924634 
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Food and Agriculture Sector 

8. November 26, U.S. Food and Drug Administration - (National) Select containers of 
Private Selection Denali Extreme Moose Tracks Ice Cream recalled for 
undeclared allergen. The U.S. Food and Drug Administration announced November 
24 a recall by The Kroger Co., for 48 ounce containers of Private Selection Denali 
Extreme Moose Tracks Ice Cream due to undeclared peanuts. The product was sold 
through several grocery retailers in 13 States, and does not include Kroger grocery 
stores. 

Source: http://www.fda.gov/Safety/Recalls/ucm424883.htm 

9. November 25, U.S. Food and Drug Administration - (Washington) Flying Cow 
Creamery voluntarily recalls yogurt. The U.S. Food and Drug Administration 
reported November 21 that Flying Cow Creamery issued a recall for one lot of its 
whole milk yogurt due to risk of bacterial contamination caused by an equipment 
malfunction that yielded a faulty time and temperature recording during pasteurization. 
The affected product was sold in 32-ounce glass containers through retailers in 
Washington. 

Source: http://www.fda.gov/Safety/Recalls/ucm424411.htm 

10. November 25, U.S. Food and Drug Administration - (Maryland; Virginia) Henry’s 
Farm Inc. recalls soybean sprouts due to possible health risk. The U.S. Food and 
Drug Administration reported November 24 that Henry’s Farm Inc., recalled its 
Soybean Sprouts due to possible Fisteria monocytogenes contamination. The product 
was sold in 1- and 2-pound packages and in bulk plastic bags and distributed to retailers 
in Maryland and Virginia. 

Source: http://www.fda.gov/Safety/Recalls/ucm424846.htm 

T Return to top i 

Water and Wastewater Systems Sector 

11. November 26, Valdosta Daily Times - (Georgia) Sewer pipe cracked, dumps 
wastewater in Sugar Creek. The city of Valdosta reported that 36,000 gallons of 
combined wastewater and stormwater was discharged into Sugar Creek north of Gornto 
Road from a cracked sewer pipe November 25 following heavy rains. 

Source: http://www.valdostadailytimes.com/news/local news/sewer-pipe-cracked- 
dumps-wastewater-in-sugar-creek/article ldd568f8-7532-lle4-8131- 
a7a9e0c0e3d2.html 

12. November 26, Washington Missourian - (Missouri) Krakow water district issues 
precautionary boil water advisory. The Public Water Supply District No. 1 of 
Franklin County issued a precautionary boil water advisory to all district customers 
except for one subdivision November 26 after recent water tests came back positive for 
total coliform bacteria. The advisory will either be lifted or a boil water order issued 
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once test results return the week of December 1. 

Source: http://www.emissourian.com/local news/county/krakow-water-district-issues- 
precautionary-boil-water-advisory/article d83fd542-7574-lle4-973a- 



03fdl64f75af.html 



13. November 25, Columbia The State - (South Carolina) Sewage spill prompts repair at 
1970s-era plant. An estimated 27,000 gallons of partially treated wastewater spilled 
into Stoops Creek, a tributary of the lower Saluda River, from the Alpine Utilities plant 
in Lexington County November 23 due to heavy rains. The failure of a bar screen was 
found to be the cause of the spill, and the plant’s operator stated that a faulty switch 
was replaced to prevent future recurrences. 

Source: http://www.thestate.com/2014/ll/25/3835364 sewage-spill-prompts-repair- 
at.html?sp=/99/132/&rh=l 

14. November 25, Orange County Register - (California) Sewage spill closes portion of 
Newport Harbor. A sewage spill in Newport Harbor November 24 closed about 1,000 
feet of the waterway to divers and swimmers after an estimated 500 gallons of raw 
sewage overflowed into a nearby storm drain and into the harbor. The area is expected 
to reopen November 26. 

Source: http://www.ocregister.com/articles/sewage-643298-area-health.html 
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Healthcare and Public Health Sector 

15. November 25, Associated Press; Auburn Star - (Indiana) Indiana hospital resumes 
admissions after scare. DeKalb Hospital in Auburn, Indiana, resumed normal 
operations November 24 after halting all admissions for 2 days while it sanitized its 
water system after tests confirmed the bacteria that causes Legionnaire’s disease was in 
the hospital’s water following the death of a patient who tested positive for the bacteria. 
Source: http://www.bellinghamherald.eom/2014/l 1/25/3993922 indiana-hospital- 
resumes-admissions.html 

16. November 25, Dallas Morning News - (Texas) Former Parkland hospital employee 
admits stealing patient information to market his home health care business. A 
former patient registration specialist at Parkland Memorial Hospital in Dallas pleaded 
guilty November 25 to stealing the personal information of more than 3,000 patients to 
drum up business for his personal health care company, Dallas Home Health Care. His 
employees cold-called seniors for extraneous service and billed Medicaid and Medicare 
for the services, while bribing patients to stay on as clients. 

Source: http://crimeblog.dallasnews.eom/2014/l 1/former-parkland-hospital-employee- 
admits-stealing-patient-information-to-market-his-home-health-care-business.html/ 

17. November 25, Associated Press - (Delaware) Former office manager at Dover 
medical practice pleads guilty to mail fraud. The former office manager at Internal 
Medicine of Dover pleaded guilty and was ordered to pay more than $1 million in 
restitution after misappropriating the medical firm’s funds for personal use by writing 
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unauthorized checks and failing to make cash deposits. 

Source: 

http://www.therepublic.com/view/story/e0cead49b6464ac8bcebel88475e5fa4/DE— 

Office-Manager-Fraud 

18. November 25, Salt Lake City Deseret News - (Utah) Former pharmacist admits he 
stole pills from Duchesne clinic. The former pharmacist at the Uintah Basin Medical 
Center in Duchesne County pleaded guilty November 24 to stealing up to 25 pills of 
Soma, a prescription muscle relaxer, per day from the clinic, amassing thousands of 
pills during his employment. 

Source: http://www.deseretnews.com/article/865616423/Former-pharmacist-admits-he- 
stole-pills-from-Duchesne-clinic.html 

19. November 25, Time Warner Cable News - (Texas) Fire prompts evacuation of south 
Austin nursing home. A November 25 fire at the South Park Meadows Nursing and 
Rehabilitation Center in south Austin prompted the 2 hour evacuation of 125 residents 
and staff from the facility while crews ventilated the building. Two employees suffered 
minor injuries. 

Source: http://austin.twcnews.com/content/news/306395/fire-prompts-evacuation-of- 
south-austin-nursing-home/ 

20. November 24, Yuma News Now - (Arizona) Walgreens bomb threat. A Walgreens 
store in Yuma County was evacuated for about 2 hours November 24 while police 
investigated after a man called the store claiming that he had placed several explosive 
devices inside the building. Officials searched the store and cleared it to reopen after no 
explosive devices were found. 

Source: http://www.yumanewsnow.com/index.php/news/yuma/8796-walgreens-bomb- 
threat 
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Government Facilities Sector 

21. November 26, WEWS 5 Cleveland - (Ohio) Flames burn through Parma Heights 
City Hall building on Pearl Road; extensive damage to mayor’s area. A November 
26 fire at the Parma Heights City Hall in Ohio caused extensive smoke damage to 
several rooms and forced the building’s closure while crews cleaned the scene and 
investigated the source of the fire. 

Source: http://www.newsnet5.com/news/local-news/oh-cuvahoga/flames-burn-through- 
parma-heights-city-hall-building-on-pearl-road-extensive-damage-to-mayor-area 

22. November 25, Nextgov - (National) Bug accidentally shut down military open 
source software portal. A data center supporting the U.S. military’s system for 
developing open source software was knocked out of service November 23 due to a 
software bug at the Defense Information Systems Agency’s Defense Enterprise 
Computing Center in Montgomery, Alabama, after an employee inadvertently executed 



- 6 - 



an automated script which corrupted the sites’ systems. No data was exposed while the 
agency worked November 25 to restore the system. 

Source: http://www.nextgov.com/defense/2014/ll/bug-accidentally-shut-down- 
military-open-source-software-portal/99950/ 

23. November 25, Tacoma News Tribune - (Washington) Flooding forces Mount Rainier 
NP to close Nisqually entrance. Mount Rainier National Park in Washington was 
forced to evacuate guests from the park and close November 25 due to flooding after a 
log jam at Kautz Creek and water spillage over the road which prompted the closure of 
the park’s Nisqually Entrance. 

Source: http://www.thenewstribune.com/2014/ll/25/35Q8153/flooding-forces-mount- 
rainier.html 

T Return to top i 

Emergency Services Sector 

Nothing to report 
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Information Technology Sector 

24. November 26, IDG News Service - (International) Hacking Team surveillance 
malware masquerades as legitimate bookmark manager. The developers of the 
Detekt tool reported that the Remote Control System (RCS) surveillance malware 
developed and sold by Italian company Hacking Team was found disguised as the 
legitimate Linkman bookmark management application. The certificate signing the 
malware was found in two fake Linkman samples containing RCS as well as in a third 
malware sample, and the certificate was revoked by its issuing authority. 

Source: http://www.networkworld.com/article/2852753/hacking-team-surveillance- 
malware-masquerades-as-legitimate-bookmark-manager.html 

25. November 26, Securityweek - (International) DoS vulnerability found in 
MatrikonOPC Server for DNP3. MatrikonOPC released updates for its OPC Server 
for DNP3 industrial connectivity devices to close a denial of service (DoS) 
vulnerability which could be exploited remotely by an attacker to cause a loop in the 
application until manually restarted. The product is used in industries including the 
energy and chemical sectors and users were advised to update their installations or use 
a workaround until the patch can be applied. 

Source: http://www.securitvweek.com/dos-vulnerabilitv-found-matrikonopc-server- 
dnp3 

26. November 25, Securityweek - (International) Adobe patches Flash Player to add 
additional protection against attack. Adobe released an out-of-band patch for its 
Flash Player software as a precaution to protect users after the Angler exploit kit was 
found to target a vulnerability in Flash Player that may not have been patched during 
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the most recent scheduled patch release. 

Source: http://www.securitvweek.com/adobe-patches-flash-player-add-additional- 
protection-against-attack 

27. November 25, SC Magazine - (International) Droid Jack RAT hits hacker forums, 
comes from legitimate app developers. Symantec researchers reported that formerly 
legitimate app developers created a new remote access tool (RAT) for Android dubbed 
DroidJack and have put the malware up for sale on underweb forums. The malware 
includes several features, including access to compromised devices’ cameras, contact, 
GPS data, and the ability to listen to voice conversations. 

Source: http://www.scmagazine.com/droidiack-rat-posted-for-sale- 
online/article/3 85281/ 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

28. November 25, Petoskey News-Review - (Michigan) Crash knocks out area Charter 
services. Approximately 700 Charter Communications customers in the Petoskey area 
were without telephone, television, and Internet services for several hours November 
25 when a vehicle crashed into a pole on M-l 19 near the local system’s head-end 
facility. 

Source: http://www.petoskevnews.com/featured-pnr/crash-knocks-out-area-charter- 
service s/article 598b6fb4-74c9- 1 1 e4-925d-a3 1 fa80 1 4d0a.html 
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Commercial Facilities Sector 

29. November 25, WMAQ 5 Chicago - (Illinois) Surveillance video released in 

Northbrook smash-and-grab. Police are searching for at least 8 individuals involved 
in a November 25 burglary of a Louis Vuitton store at a Northbrook, Illinois mall 
where the suspects crashed a vehicle into the store and stole several purses worth an 
estimated $120,000. An investigation is underway to determine if the burglary is 
connected to several similar thefts at other high-end retail stores in the Chicago area. 
Source: http://www.nbcchicago.com/news/local/Surveillance-Video-Captures- 
Northbrook-Smash-and-Grab-28392029 1 .html 



For another story, see item 20 
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Dams Sector 

Nothing to report 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original 
source material. 
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